[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F4":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","4","Control 4","Secure Configuration of Enterprise Assets and Software",956,"Center for Internet Security (CIS)","**What it asks for.** Organisations should establish and maintain hardened configurations for end user devices, servers, network devices, cloud services and applications, replacing insecure vendor defaults. Configurations should be documented, applied consistently and kept from drifting.\n\n**In practice.** Teams typically start from recognised hardening benchmarks, adapt them into internal standards and deploy them through configuration management, group policy, MDM or infrastructure as code. Default accounts are disabled or renamed, unnecessary services are removed, screen locks and host firewalls are enforced, and automated compliance scans detect drift. Evidence includes the approved baselines, deployment records, drift or compliance reports and exceptions with owners and review dates.\n\n**Common gaps.** Baselines are often defined for servers but not for network gear, cloud tenants or SaaS settings. Drift goes unnoticed when compliance scanning is missing, and temporary exceptions quietly become permanent.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Fsecure-configuration-of-enterprise-assets-and-software","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},1045,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"crypto-exchange-names-used-to-mask-unauthorized-screenconnect-sessions","Crypto Exchange Names Used to Mask Unauthorized ScreenConnect Sessions","2026-11-14T00:20:22.527+00:00",{"slug":24,"title":25,"published_at":26},"sckit-worm-hijacks-screenconnect-sessions-to-compromise-it-technician-workstations","SCKit Worm Hijacks ScreenConnect Sessions to Compromise IT Technician Workstations","2026-11-13T22:20:58.16+00:00",{"slug":28,"title":29,"published_at":30},"internet-facing-containers-with-sensitive-data-access-create-exploitable-attack-paths","Internet-Facing Containers with Sensitive Data Access Create Exploitable Attack Paths","2026-11-13T18:21:17.032+00:00",{"slug":32,"title":33,"published_at":34},"unauthenticated-ray-agent-enables-hidden-gpu-crypto-mining-via-rootkit","Unauthenticated Ray Agent Enables Hidden GPU Crypto Mining via Rootkit","2026-11-13T16:21:40.741+00:00",{"slug":36,"title":37,"published_at":38},"weak-sql-server-passwords-enable-brute-force-takeover-and-malware-deployment","Weak SQL Server Passwords Enable Brute-Force Takeover and Malware Deployment","2026-11-13T15:20:23.452+00:00",{"slug":40,"title":41,"published_at":42},"faulty-update-triggers-global-microsoft-outage-echoing-crowdstrike-incident","Faulty Update Triggers Global Microsoft Outage, Echoing CrowdStrike Incident","2026-11-13T14:20:22.59+00:00",{"slug":44,"title":45,"published_at":46},"espionage-group-abuses-windows-internals-to-pivot-across-air-gapped-government-networks","Espionage Group Abuses Windows Internals to Pivot Across Air-Gapped Government Networks","2026-11-13T12:21:03.116+00:00",{"slug":48,"title":49,"published_at":50},"windows-zero-day-signdrop-highlights-privilege-escalation-risk-on-unpatched-systems","Windows Zero-Day SignDrop Highlights Privilege Escalation Risk on Unpatched Systems","2026-11-13T09:20:23.484+00:00",{"slug":52,"title":53,"published_at":54},"weak-sql-server-credentials-open-door-to-miners-and-rat","Weak SQL Server Credentials Open Door to Miners and RAT","2026-11-12T17:21:13.877+00:00",{"slug":56,"title":57,"published_at":58},"endpoint-management-platforms-weaponized-against-the-enterprises-they-protect","Endpoint Management Platforms Weaponized Against the Enterprises They Protect","2026-11-12T16:22:00.568+00:00",{"slug":60,"title":61,"published_at":62},"factory-reset-restores-default-root-credentials-in-lenovo-server-firmware","Factory Reset Restores Default Root Credentials in Lenovo Server Firmware","2026-11-12T14:22:14.756+00:00",{"slug":64,"title":65,"published_at":66},"misconfigured-anonymous-access-exposes-container-registries-to-full-hijack","Misconfigured Anonymous Access Exposes Container Registries to Full Hijack","2026-11-12T14:20:21.972+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",391,{"slug":74,"name":75,"problem":76,"stories":77},"patch-management","Automated patch management","Known holes get closed in days, not months.",343,{"slug":79,"name":80,"problem":81,"stories":82},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",296,{"slug":84,"name":85,"problem":86,"stories":87},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",144,{"slug":89,"name":90,"problem":91,"stories":92},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",141,{"slug":94,"name":95,"problem":96,"stories":97},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",131,[99,105,110,116,120,125,130,135],{"family":100,"item":101,"code":102,"title":103,"together":104},"gdpr","32","Article 32","Security of processing",461,{"family":5,"item":106,"code":107,"title":108,"together":109},"7","Control 7","Continuous Vulnerability Management",454,{"family":111,"item":112,"code":113,"title":114,"together":115},"nist-800-53","si-2","SI-2","Flaw Remediation",419,{"family":117,"item":118,"code":119,"title":119,"together":115},"itil","overview","ITIL",{"family":5,"item":121,"code":122,"title":123,"together":124},"12","Control 12","Network Infrastructure Management",322,{"family":5,"item":126,"code":127,"title":128,"together":129},"6","Control 6","Access Control Management",274,{"family":111,"item":131,"code":132,"title":133,"together":134},"ac-2","AC-2","Account Management",225,{"family":111,"item":136,"code":137,"title":138,"together":139},"si-3","SI-3","Malicious Code Protection",224]